{"id":19502,"date":"2017-04-10T06:18:24","date_gmt":"2017-04-09T22:18:24","guid":{"rendered":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/04\/10\/proxmox-%e8%a7%a3%e6%b1%ba%e5%9c%a8-lxc-%e7%84%a1%e6%b3%95%e5%95%9f%e5%8b%95-openvpn\/"},"modified":"2021-03-18T17:24:59","modified_gmt":"2021-03-18T09:24:59","slug":"proxmox-%e8%a7%a3%e6%b1%ba%e5%9c%a8-lxc-%e7%84%a1%e6%b3%95%e5%95%9f%e5%8b%95-openvpn","status":"publish","type":"post","link":"https:\/\/2blog.ilc.edu.tw\/25793\/2017\/04\/10\/proxmox-%e8%a7%a3%e6%b1%ba%e5%9c%a8-lxc-%e7%84%a1%e6%b3%95%e5%95%9f%e5%8b%95-openvpn\/","title":{"rendered":"Proxmox – \u89e3\u6c7a\u5728 LXC \u7121\u6cd5\u555f\u52d5 OpenVPN"},"content":{"rendered":"

\u5728 Proxmox LXC \u5b89\u88dd OpenVPN\uff0c\u4e26\u8a2d\u5b9a\u5b8c\u6210\u555f\u52d5\u5f8c\uff0c\u51fa\u73fe\u4e0b\u9762\u7684\u932f\u8aa4\u8a0a\u606f
# systemctl status openvpn@server.service<\/span>
\u25cf openvpn@server.service – OpenVPN connection to server<\/span>
\u00a0\u00a0 Loaded: loaded (\/lib\/systemd\/system\/openvpn@.service; enabled; vendor preset: enabled)<\/span>
\u00a0\u00a0 Active: failed<\/span> (Result: exit-code) since Mon 2017-02-20 19:17:06 CST; 6s ago<\/span>
\u00a0\u00a0\u00a0\u00a0 Docs: man:openvpn(8)<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 https:\/\/community.openvpn.net\/openvpn\/wiki\/Openvpn23ManPage<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 https:\/\/community.openvpn.net\/openvpn\/wiki\/HOWTO<\/span>
\u00a0 Process: 1585 ExecStart=\/usr\/sbin\/openvpn –daemon ovpn-%i –status \/run\/openvpn\/%i.status 10 –cd \/etc\/openvpn –script-security 2 –config \/etc\/openvpn\/%i.conf –writepid \/run\/openvpn\/%i.pid (code=exited, st<\/span>
\u00a0Main PID: 1586 (code=exited, status=1\/FAILURE)<\/span><\/p>\n

Feb 20 19:17:06 vpn systemd[1]: Starting OpenVPN connection to server…<\/span>
Feb 20 19:17:06 vpn systemd[1]: openvpn@server.service: PID file \/run\/openvpn\/server.pid not readable (yet?) after start: No such file or directory<\/span><\/span>
Feb 20 19:17:06 vpn systemd[1]: Started OpenVPN connection to server.<\/span>
Feb 20 19:17:06 vpn systemd[1]: openvpn@server.service: Main process exited, code=exited, status=1\/FAILURE<\/span>
Feb 20 19:17:06 vpn systemd[1]: openvpn@server.service: Unit entered failed state.<\/span>
Feb 20 19:17:06 vpn systemd[1]: openvpn@server.service: Failed with result ‘exit-code’.<\/span>[@more@]\u53c3\u8003\u7db2\u7ad9\uff1a
Setup OpenVPN on Proxmox LXC – Hungred Dot Com<\/a><\/p>\n

\u767b\u5165 LXC \u5f8c
# cd \/dev<\/span>
# mkdir net<\/span>
# mknod net\/tun c 10 200<\/span>
# chmod 0666 net\/tun<\/span>
# ls -l \/dev\/net\/tun<\/span>
crw-rw-rw- 1 root root 10, 200 Feb 20 19:24 \/dev\/net\/tun<\/span><\/p>\n

\u6216\u76f4\u63a5\u5beb\u5728 \/etc\/rc.local<\/span> \u4e4b\u4e2d
# vim \/etc\/rc.local<\/span>
\u52a0\u5165\u4e0b\u9762\u5e7e\u884c
mkdir \/dev\/net<\/span>
mknod \/dev\/net\/tun c 10 200<\/span>
chmod 0666 \/dev\/net\/tun<\/span><\/p>\n

OpenVPN \u53ef\u4ee5\u6b63\u5e38\u57f7\u884c
# systemctl status openvpn@server.service<\/span>
\u25cf openvpn@server.service – OpenVPN connection to server<\/span>
\u00a0\u00a0 Loaded: loaded (\/lib\/systemd\/system\/openvpn@.service; enabled; vendor preset: enabled)<\/span>
\u00a0\u00a0 Active: active (<\/span>running<\/span>) since Mon 2017-02-20 19:24:33 CST; 18s ago<\/span>
\u00a0\u00a0\u00a0\u00a0 Docs: man:openvpn(8)<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 https:\/\/community.openvpn.net\/openvpn\/wiki\/Openvpn23ManPage<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 https:\/\/community.openvpn.net\/openvpn\/wiki\/HOWTO<\/span>
\u00a0 Process: 1600 ExecStart=\/usr\/sbin\/openvpn –daemon ovpn-%i –status \/run\/openvpn\/%i.status 10 –cd \/etc\/openvpn –script-security 2 –config \/etc\/openvpn\/%i.conf –writepid \/run\/openvpn\/%i.pid (code=exited, st<\/span>
\u00a0Main PID: 1601 (openvpn)<\/span>
\u00a0\u00a0 CGroup: \/system.slice\/system-openvpn.slice\/openvpn@server.service<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 mq1601 \/usr\/sbin\/openvpn –daemon ovpn-server –status \/run\/openvpn\/server.status 10 –cd \/etc\/openvpn –script-security 2 –config \/etc\/openvpn\/server.conf –writepid \/run\/openvpn\/server.pid<\/span><\/p>\n

Feb 20 19:24:33 vpn systemd[1]: Starting OpenVPN connection to server…<\/span>
Feb 20 19:24:33 vpn systemd[1]:<\/span> openvpn@server.service: PID file \/run\/openvpn\/server.pid not readable (yet?) after start: No such file or directory<\/span>
Feb 20 19:24:33 vpn systemd[1]: Started OpenVPN connection to server.<\/span><\/p>\n

server.pid \u6c92\u6709\u627e\u4e0d\u5230
# ls -l \/var\/run\/openvpn\/server.pid<\/span>
-rw-r–r– 1 root root 5 Feb 20 19:24 \/var\/run\/openvpn\/server.pid<\/span>
# ls -l \/run\/openvpn\/server.pid<\/span>
-rw-r–r– 1 root root 5 Feb 20 19:24 \/run\/openvpn\/server.pid<\/span><\/p>\n

\u57f7\u884c OpenVPN \u5f8c\u7522\u751f\u7684 tun0 \u4ecb\u9762
# ifconfig tun0<\/span>
tun0\u00a0\u00a0\u00a0\u00a0\u00a0 Link encap:UNSPEC\u00a0 HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 inet addr:10.1.0.1\u00a0 P-t-P:10.1.0.2\u00a0 Mask:255.255.255.255<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 UP POINTOPOINT RUNNING NOARP MULTICAST\u00a0 MTU:1500\u00a0 Metric:1<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RX packets:0 errors:0 dropped:0 overruns:0 frame:0<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 collisions:0 txqueuelen:100<\/span>
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 RX bytes:0 (0.0 B)\u00a0 TX bytes:0 (0.0 B)<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

\u5728 Proxmox LXC \u5b89\u88dd OpenVPN\uff0c\u4e26\u8a2d\u5b9a\u5b8c\u6210\u555f\u52d5\u5f8c\uff0c\u51fa\u73fe\u4e0b\u9762\u7684\u932f\u8aa4\u8a0a\u606f# systemctl … <\/p>\n

\u95b1\u8b80\u5168\u6587\u3008Proxmox – \u89e3\u6c7a\u5728 LXC \u7121\u6cd5\u555f\u52d5 OpenVPN\u3009<\/span><\/a><\/p>\n","protected":false},"author":55,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[168,191],"tags":[],"class_list":["post-19502","post","type-post","status-publish","format-standard","hentry","category-c-84780","category-c-104943"],"meta_key":{"_pingme":["1"],"_encloseme":["1"],"lt_post_id":["686683"]},"_links":{"self":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19502"}],"collection":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/users\/55"}],"replies":[{"embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/comments?post=19502"}],"version-history":[{"count":1,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19502\/revisions"}],"predecessor-version":[{"id":21018,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/posts\/19502\/revisions\/21018"}],"wp:attachment":[{"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/media?parent=19502"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/categories?post=19502"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2blog.ilc.edu.tw\/25793\/wp-json\/wp\/v2\/tags?post=19502"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}